This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json) Hash identifier: 8Ui5trqvcIw74qQBSsx7hn66sNKKv2WOMer6tunGGBs= Subject key identifier: 25:45:7B:73:77:E8:D1:03:18:DC:BF:14:60:85:C2:36:1A:2C:73:F2 Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36 Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36 Certificate serial: 019B32D736BAB699BE7C828996D10E0E0B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft Manifest number: 09CA Signing time: Thu 18 Dec 2025 19:02:03 +0000 Manifest this update: Thu 18 Dec 2025 19:02:03 +0000 Manifest next update: Fri 19 Dec 2025 19:02:03 +0000 Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: tQAxShDfBfxBIEH6PnuslaatL7OSZIAOTUCp17TFdGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:36:ba:b6:99:be:7c:82:89:96:d1:0e:0e:0b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36 Validity Not Before: Dec 18 19:02:03 2025 GMT Not After : Dec 19 19:02:03 2025 GMT Subject: CN=25457b7377e8d10318dcbf146085c2361a2c73f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:74:80:c6:f1:bd:85:f7:01:bf:80:44:c3:c4: e9:90:f9:8d:6b:11:ca:8c:be:22:e9:f3:5b:d5:d4: c0:46:f2:15:ec:ba:4e:ca:3c:a8:87:7e:e6:58:15: e6:ee:29:48:f2:91:0e:d9:50:95:8a:4f:6e:06:9d: 49:fb:aa:3a:41:3e:8b:6e:fe:c1:05:a6:ba:d2:1a: 4c:47:79:54:cd:ef:9f:ce:7c:7e:fa:a6:69:94:42: 56:c9:2a:a8:d4:90:ba:9b:42:12:bb:6d:82:9b:b5: 62:9f:bf:b8:4c:1e:7c:77:61:28:24:d7:4f:bf:00: 57:91:0d:b6:53:b0:44:4d:34:aa:3b:0f:a8:bf:d8: 35:64:e6:fd:f1:7a:88:9a:c6:8e:7a:e3:03:a9:1f: a8:84:ba:02:fa:06:d4:e8:f2:e2:12:17:bc:aa:ab: 84:67:7b:e8:b0:dc:7b:45:cf:c6:9b:50:4a:1c:5e: 74:fa:eb:49:b8:f3:bb:04:3e:2b:52:ae:a9:20:68: 6f:4b:6f:89:5b:0a:71:1e:92:17:c0:3f:36:92:1b: 01:a9:56:aa:b0:43:19:9e:f0:4a:a4:40:59:72:ce: 02:e3:76:c6:ab:00:ee:49:a8:1c:97:60:51:b8:4c: 5e:52:a0:c1:ad:b8:50:cb:4b:3d:ec:19:70:1f:18: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:7B:73:77:E8:D1:03:18:DC:BF:14:60:85:C2:36:1A:2C:73:F2 X509v3 Authority Key Identifier: keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:99:a0:6c:e2:99:04:7c:fe:c8:be:0b:cd:a9:b7:7b:f5:2e: f7:05:d8:84:a3:79:74:8d:d9:37:df:11:66:d0:50:51:23:57: 3b:23:8c:8f:08:fc:93:fc:c2:db:2e:96:87:b1:46:08:0c:fe: 10:f9:07:81:f0:c1:d3:c6:f9:34:f7:ba:49:ad:9e:cd:40:1f: 51:f7:b1:8b:b6:6f:d5:d5:a2:36:9d:90:c9:1c:64:6d:77:dc: d3:5b:a2:b0:6a:3d:96:8f:e5:61:b5:af:dc:3b:0e:16:6c:0f: f3:a7:be:1b:d5:40:fb:06:66:55:0e:41:97:61:33:d7:0e:ba: 68:20:9a:61:bc:97:d9:5c:6e:8f:ce:f6:24:98:58:9b:c9:3f: 9d:22:de:e9:0c:79:9f:33:fe:96:99:f9:67:e0:02:82:17:cc: 2a:fd:7c:1e:7d:e9:a7:5f:c3:78:49:aa:2d:6f:c4:bd:09:a4: 13:92:73:be:3c:b0:c6:80:fc:e8:80:d5:f6:e3:c1:16:ba:bf: fb:8c:39:0c:e5:ae:3b:2a:01:9d:03:ad:10:7b:f3:e7:63:f6: fe:9a:b8:85:05:56:a1:2e:f8:d5:e9:0c:ef:32:bc:56:4d:24: 55:78:54:22:fe:d5:e2:45:1f:9b:4c:09:f3:72:97:5b:ca:a7: 16:04:98:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1za6tpm+fIKJltEODgsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi YWVjMzYwHhcNMjUxMjE4MTkwMjAzWhcNMjUxMjE5MTkwMjAzWjAzMTEwLwYDVQQD EygyNTQ1N2I3Mzc3ZThkMTAzMThkY2JmMTQ2MDg1YzIzNjFhMmM3M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XSAxvG9hfcBv4BEw8TpkPmNaxHK jL4i6fNb1dTARvIV7LpOyjyoh37mWBXm7ilI8pEO2VCVik9uBp1J+6o6QT6Lbv7B Baa60hpMR3lUze+fznx++qZplEJWySqo1JC6m0ISu22Cm7Vin7+4TB58d2EoJNdP vwBXkQ22U7BETTSqOw+ov9g1ZOb98XqImsaOeuMDqR+ohLoC+gbU6PLiEhe8qquE Z3vosNx7Rc/Gm1BKHF50+utJuPO7BD4rUq6pIGhvS2+JWwpxHpIXwD82khsBqVaq sEMZnvBKpEBZcs4C43bGqwDuSagcl2BRuExeUqDBrbhQy0s97BlwHxgaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVFe3N36NEDGNy/FGCFwjYaLHPyMB8GA1UdIwQY MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt MjY3YmExNzJkNDZkLzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5mgbOKZ BHz+yL4Lzam3e/Uu9wXYhKN5dI3ZN98RZtBQUSNXOyOMjwj8k/zC2y6Wh7FGCAz+ EPkHgfDB08b5NPe6Sa2ezUAfUfexi7Zv1dWiNp2QyRxkbXfc01uisGo9lo/lYbWv 3DsOFmwP86e+G9VA+wZmVQ5Bl2Ez1w66aCCaYbyX2Vxuj872JJhYm8k/nSLe6Qx5 nzP+lpn5Z+ACghfMKv18Hn3pp1/DeEmqLW/EvQmkE5JzvjywxoD86IDV9uPBFrq/ +4w5DOWuOyoBnQOtEHvz52P2/pq4hQVWoS741ekM7zK8Vk0kVXhUIv7V4kUfm0wJ 83KXW8qnFgSYMA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:19:57 2025 by rpki-client